topic IDSM Module failover in Network Security

IDSM Module failover

arun_laksh — Sun, 10 Mar 2019 11:58:13 GMT

Hi Team,

We have IDSM and FWSM module installed on each Cisco switch 6500 series placed in Active/Standby mode (HSRP).

We want to perform failover testing with the below scenarios for the IDSM and FWSM module

1. How will the traffic flow if the IDSM module placed in the active switch is brought down or failed?

2. How will the traffic flow if the FWSM module placed in the active switch is brought down or failed?

3. How will the traffic flow if both FWSM and IDSM module placed in the active switch is brought down or failed?

Regards,

Arun.L

Re: IDSM Module failover

Farrukh Haroon — Thu, 22 Apr 2010 14:06:44 GMT

Regarding the FWSM, you can issue the 'no failover active' command on the Active box or 'failover active' on the Standby box to force failover.

For the IDSM, you can manipulate the spanning tree cost on the active IDSM-2 module (making it higher), so that the secondary module becomes the primary traffic path. Sometimes this automatically happens after the FWSM failover (because of SPT cost change), but this would depend on your spanning tree topology. This can be done via the intrusion-detection comand on the host switch chassis.

Please rate if helpful.

Regards

Farrukh